Project

General

Profile

Activity

From 12/22/2013 to 01/20/2014

01/20/2014

07:42 PM pfSense Packages Bug #2992: Boot problem after upgrade
This happened to me today. It happened on a fresh install with only bandwidthd and openvpn installed, after I changed... Eric Green
06:59 PM Revision b4d772dc: Correct this i thought i already did. Thanks-to: Phil Davis for spotting
Ermal Luçi
03:09 PM Revision d760445e: Do not need to go in the internet world to start a package
Ermal LUÇI
03:00 PM Revision 44b19298: * Do not call stop service in the start command.
* Add some more checks into the functions to avoid errors
* Also silence some output that can cause issues
Ermal LUÇI
12:53 PM Revision 770a7759: Fix FreeBSD version detection for 10.x
Renato Botelho
11:36 AM Revision aefc6bc2: Obsolete old ntp binaries
Renato Botelho
11:35 AM Revision c42d721b: Obsolete old ntp binaries
Renato Botelho
07:25 AM Todo #3399 (Resolved): Implement a replacement for base nsupdate command for RFC2136 Dynamic DNS
Due to FreeBSD 10.x changes, nsupdate is no longer available for inclusion from base. We will need to use a replaceme... Jim Pingle
03:36 AM Bug #3250: problems with ixgbe driver in pfsense 2.1 release
Firewall is updated to 2.1.1-PRERELEASE (amd64) built on Sun Jan 19 03:33:57 EST 2014. After boot MBUF status is 32% ... Zeev Zalessky

01/19/2014

01:13 AM Bug #3321 (Resolved): IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
thanks for the confirmation Chris Buechler
12:36 AM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
This problem has been fixed in 2.1.1-PRERELEASE! :) Christian Borchert

01/17/2014

04:46 AM Feature #3398 (Needs Patch): Notifications - information about errors
I test the pfsense on HP DL360 G5
CPU: Intel(R) Xeon(R) E5410
Ram: 8GB
Disk controller: P400i (RAID5 4x hdd)
Wh...
Przemysław W
02:50 AM Bug #3205: Partial system freeze when disconnecting USB 3G stick
i got the same situation as well as with the 3g stick connected if i reboot pfsense then it would just get stuck when... Bipin Chandra

01/16/2014

02:13 PM Revision 93a79543: Bump version
Jim Pingle
01:30 PM Revision 254df317: Merge pull request #887 from brunostein/tracker_firewall_rule
added input hidden with tracker value Ermal Luçi
12:31 PM Revision 72b774aa: added input hidden with tracker value
Bruno Ferri
02:28 AM Bug #3397 (Needs Patch): Cannot load builtin or external firmware for mwl driver
Hello,
I've tried to get a marvell wireless card to work a long time before posting this.
Here's the output of pf...
Orsiris de Jong

01/15/2014

05:35 PM Revision fdfa8f43: ports ntp moved to sbin, follow
Jim Pingle
05:28 PM Revision 3d54553b: ports ntp moved to sbin, follow
Jim Pingle

01/14/2014

11:34 PM Revision 096f73b4: Merge pull request #886 from dotike/master
locale path name clarification Renato Botelho
09:15 PM Todo #3396 (Resolved): Replace dnsmasq with Unbound
The replacement of dnsmasq with unbound needs to be completed for 2.2.
Chris Buechler
08:40 PM Bug #3214 (Rejected): bogons/bogonsv6 include stupid things
#3395 addresses the only problem here. none of that impacts DHCP4 clients. Chris Buechler
08:39 PM Bug #3395 (Resolved): DHCPv6 client pass rules need to come before bogons
8000::/1 is included in Cymru's v6 bogons list. That's sane, since it shouldn't be in the Internet routing table, but... Chris Buechler
08:17 PM Bug #3394: radvd wrongly binds to *:546 in some circumstances
I'll provide further details privately to the person working on the issue, it's on a customer system and not somethin... Chris Buechler
08:16 PM Bug #3394 (Resolved): radvd wrongly binds to *:546 in some circumstances
I can't seem to determine why, as different systems with seemingly identical radvd.conf files don't consistently disp... Chris Buechler
07:34 AM Bug #3045: NTPD crash / doesn't come up
simply one line contining:
-0.056
(or other numbers)
Fabio Giudici
04:03 AM Bug #3045: NTPD crash / doesn't come up
Fabio Giudici wrote:
> Good morning
> Just one more question: is it ntpd running in jail/chroot?
>
> Just to ...
Renato Botelho
01:01 AM Bug #3045: NTPD crash / doesn't come up
Good morning
Just one more question: is it ntpd running in jail/chroot?
Just to restrict the issue...but it se...
Fabio Giudici
07:10 AM Todo #765: Patch: Add custom DHCP configuration
Hello,
I am aware that this Feature Request is 3 years old but I feel that the last comment by Jonathan Diete is t...
Florent Poinsaut
05:40 AM Bug #2706 (Feedback): Padlock may need some adjustments for FreeBSD 10.x
Applied in changeset pfsense-tools:commit:3b8d3adb58956d7415f52bcc81cfb1eca84e80b0. Renato Botelho
03:05 AM Revision 7219bde6: include gettext locales in line encoding list
portable object (.po) and portable object translation (.pot) files
Signed-off-by: Isaac (.ike) Levy <ike@blackskyres...
Isaac (.ike) Levy
03:05 AM Revision 2459a956: Cleanup- most languages simply need the ascii abreviation.
Ful country code and encoding was necessary for pt_BR.ISO8859-1, (Brazilian Portuguese), and since it was the first t... Isaac (.ike) Levy

01/13/2014

11:14 AM Bug #3045: NTPD crash / doesn't come up
I see a problem on my 2.1 64-bit system with NTPD that may be related to the issues reported here. Anytime the WAN i... Bill Meeks
09:50 AM Bug #3045: NTPD crash / doesn't come up
Fabio Giudici wrote:
> I did just a series of test, and the core dump of ntpd seems strictly related to the presence...
Renato Botelho
08:56 AM Revision d2dd5794: updates to license.php
Chris Buechler
08:54 AM Revision c80f2b44: updates to license.php
Chris Buechler

01/12/2014

08:21 AM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
And another one on the broken scrub: http://www.freebsd.org/cgi/query-pr.cgi?pr=172648 Doktor Notor
08:16 AM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
Erm, guys, what's up with this?! Upstream apparently does NOT intend to fix this in any way, cf. http://www.freebsd.o... Doktor Notor

01/11/2014

01:26 PM Feature #2358: NAT64 support
UPVOTE. I really like to be able to run my network with IPv6 only and make legacy IPv4 site available through NAT64. Andreas Peetz
03:38 AM Bug #3045: NTPD crash / doesn't come up
I did just a series of test, and the core dump of ntpd seems strictly related to the presence of the file /var/db/ntp... Fabio Giudici

01/10/2014

04:41 PM Revision 706ba0e4: Use "disable monitor" in NTP config to mitigate CVE-2013-5211.
Jim Pingle
04:41 PM Revision 3e146089: Use "disable monitor" in NTP config to mitigate CVE-2013-5211.
Jim Pingle
07:40 AM Revision c349f263: Merge pull request #884 from dotike/master
Phase 1 ja_JA.UTF8 Translation Chris Buechler
03:08 AM Feature #3393: AS filtering support in aliases
An example of retrieving facebook ips from their AS number
[code]
whois -h whois.radb.net -- '-i origin AS32934' | ...
Ermal Luçi
03:06 AM Feature #3393 (Resolved): AS filtering support in aliases
It would be nice to have an option to define a type of AS number in the aliasesand retrieve all the ips from the whoi... Ermal Luçi
01:38 AM Feature #3377: OAuth2 authentication in captive portal
there will be publicly-available 2.2 snapshots in the not too distant future. At this point, I think you might be ok ... Chris Buechler

01/09/2014

08:23 AM Revision 43656206: Should to go master, not RELENG_2_1. Revert "Merge pull request #882 from derelict-pf/cp-nohttpsforwards"
This reverts commit f8d1587b6e2cd8441fa16733a02af25257fc7708, reversing
changes made to 51922cb793b83bf7d22fdaa47205f...
Chris Buechler
08:18 AM Revision f8d1587b: Merge pull request #882 from derelict-pf/cp-nohttpsforwards
Add checkbox and logic to disable forwarding HTTPS/SSL (Port 443) Chris Buechler
04:42 AM Feature #3377: OAuth2 authentication in captive portal
Here is a proof of concept, for a OAuth2 captive portal authentication with Google accounts :
https://github.com/...
Thomas NOEL
03:05 AM Revision fadfef2b: removing my fork README
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision e424ca74: bug address
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 93847971: Machine Translation (Phase 1) Complete.
Next steps:
- generate the .mo files and try loading it up
- Japanese Native Speaker(s) sanity pass through
(roughl...
Isaac (.ike) Levy
03:05 AM Revision 04571fb6: Machine generation used Google Translate API, translate.google.com, and Mort Yao's goog le-translate-cli
Wrapped some parsing around the following utility by Mort Yao,
https://github.com/soimort/google-translate-cli
Sig...
Isaac (.ike) Levy
03:05 AM Revision fe8747ed: first full machine run
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision a2e31d7d: workspot: great, but this process requires tedious re-running the program.
Next step: wrap the translation step in a timeout, and print some simple hook in the output so you can find it for th... Isaac (.ike) Levy
03:05 AM Revision 5e269b45: workspot: cleanup and continued translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 20c5f316: X-Generator: vim(1), awk(1), sed(1) - for real.
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 7a716fa2: workspot: trying to speed up machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 21e23bc2: workspot: pass through to correct minor syntax
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net>
Signed-off-by: Kiyo Takami <foof@blackskyresearch.net>
Isaac (.ike) Levy
03:05 AM Revision 0cd6ed3b: workspot: mechincal first pass
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision f8c3f30d: workspot: continuing with machine translation, several heavily repeated phrases scrutinized
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 60644dad: workspot: plowing ahead with machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 5f01b774: workspot: continuing machine translation first pass
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision c7056c99: workspot: carp and interface bits, continued first pass machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 5d2b2df0: workspot: firewall, interfaces, still plowing through machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision fbf5a7d8: workspot: RADIUS and Captive Portal messages, machine translations
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision cd134df7: Temporary README for GitHub fork
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 2129ac6a: workspot: country names
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 826cfb5c: jp syntax change
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 8908eeed: workspot, continuing to run through with rough human-augmented machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 086689be: workspot, continuing to run through with rough human-augmented machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 25ae07d0: workspot- plowing through with rough human-augmented machine translation
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 002722b7: start by copying pt_BR locale
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 1023edb2: encoding change, and wrapping up LDAP sections rough pass
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:05 AM Revision 70d8b7b0: continued cumulative machine translations
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
02:52 AM Bug #3392 (Rejected): Allow to configure different mac addresses for multiple VLANs on same physical interface
duplicate of #2859.
this isn't the place to ask questions, please take those to the forum or mailing list.
Chris Buechler
02:50 AM Bug #3392: Allow to configure different mac addresses for multiple VLANs on same physical interface
Feature #2859
how to do that coz i have just one nic and 4 VLANS configured on it, 2 WAN and 2 LAN
Nikita Drachev
02:48 AM Bug #3392 (Rejected): Allow to configure different mac addresses for multiple VLANs on same physical interface
I had to beg to change the MAC of the provider.
Very important! I can make a few NIC VMware on, but I can not create...
Nikita Drachev

01/08/2014

09:18 AM Feature #972: Allow adding gateways outside of interface subnet
Hi Dan,
I felt in the same trouble, and I the idea I have found to survive reboot is using the ShellCmd package : ...
Dédé D
07:41 AM pfSense Packages Bug #3391 (Rejected): Quagga OSPF doesn't install properly
It works fine in a test VM here that never had Quagga, and also in a separate VM that had it previously and reinstall... Jim Pingle
02:46 AM pfSense Packages Bug #3391 (Rejected): Quagga OSPF doesn't install properly
Hello,
I have several pfSense firewalls, all having Quagga OSPF and running without issues.
They where installed ...
Johan Braeken
05:28 AM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
You mean you essentially created a cert chain yourself in the Certificate Authority Manager and then it worked? Malte Stretz

01/07/2014

07:20 PM Feature #3388: Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
that's reasonable, submit that as a pull request in github and we'll get it merged. Chris Buechler
04:15 PM Feature #3388: Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
You're still misunderstanding. If the initial connection by the user prior to CP authentication is to, say, https://... Chris Linstruth
02:19 PM Feature #3388: Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
Use a signed certificate on your CP!!! Ermal Luçi
10:37 AM Feature #3388: Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
I believe you are missing the point.
This enables administrators to utilize HTTPS CP authentication, which might b...
Chris Linstruth
05:05 AM Feature #3388 (Rejected): Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
Just do not configure https authentication! Ermal Luçi
04:39 PM Feature #3387: process_alias_urltable Frequency
Ah never mind. I forgot about the ability to change the type on the fly... Shawn Bruce
04:12 PM Feature #3387: process_alias_urltable Frequency
Shawn Bruce wrote:
> I have created a diff for firewall_aliases_edit.php against the latest git version. Would this ...
Shawn Bruce
04:11 PM Feature #3387: process_alias_urltable Frequency
I have created a diff for firewall_aliases_edit.php against the latest git version. Would this be acceptable?
I am...
Shawn Bruce
04:12 AM Feature #3387: process_alias_urltable Frequency
A code to upgrade current config to new format will be necessary too Renato Botelho
03:59 PM Revision 33e72874: Merge pull request #880 from phil-davis/master
Check for vertical bars in alias detail descriptions Ermal Luçi
03:05 PM Revision 7d14b000: Check for vertical bar at start or end of description
Phil Davis
02:59 PM Revision 24445691: Check for vertical bars in alias detail descriptions
The descriptions of each entry in an alias are stored in config.xml as a list delimited by "||". So you cannot have "... Phil Davis
10:58 AM Revision 51922cb7: Add 'limited' to ntpd restrict list to workaround CVE-2013-5211. It fixes #3384
Renato Botelho
10:58 AM Revision 6b660731: Add 'limited' to ntpd restrict list to workaround CVE-2013-5211. It fixes #3384
Renato Botelho
09:41 AM Revision 7c2ea0cc: Update reserved_keywords checks to match firewall_aliases_edit
firewall_aliases_import should have the same checks for reserved names as firewall_aliases_edit
This code should real...
Phil Davis
09:39 AM Revision fe56417f: Merge pull request #879 from phil-davis/master
Update reserved_keywords checks to match firewall_aliases_edit Renato Botelho
07:39 AM Bug #3383: Web GUI becomes slow or unusable if the LDAP server used for GUI auth is unreachable
It seems like maybe the authentication fallback that allows a person to login using local auth when their LDAP server... Jim Pingle
04:59 AM Bug #3383: Web GUI becomes slow or unusable if the LDAP server used for GUI auth is unreachable
On pfSense 2.2 you will be able to revert GUI auth backend to Local Database on the same option you use to restore GU... Renato Botelho
06:51 AM Bug #3389 (Resolved): GUI allows to configure ICMPv4 types for ICMPv6 firewall rules
When I try to create a firewall rule that handles only certain types of IPv6 ICMP traffic, the interface lets me sele... Andreas Peetz
05:00 AM Bug #3384: NTPd should deny service if the packet spacing violates the lower limits specified in the discard command (CVE-2013-5211)
Applied in changeset commit:51922cb793b83bf7d22fdaa47205fd59b4d70e87. Renato Botelho
05:00 AM Bug #3384 (Feedback): NTPd should deny service if the packet spacing violates the lower limits specified in the discard command (CVE-2013-5211)
Applied in changeset commit:6b6607316481aacaa055f8e4bce2ce1e520d3b1b. Renato Botelho

01/06/2014

05:09 PM Revision 4410f699: This might also say "icmpv6" here and lead to a bad rule.
Jim Pingle
05:08 PM Revision 0959b4d3: This might also say "icmpv6" here and lead to a bad rule.
Jim Pingle
04:48 PM Feature #3388 (Rejected): Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
Candidate patch here:
https://github.com/derelict-pf/pfsense/commit/e98daec5960b7ecdd18bc461003df3a18d2adbe7
Chris Linstruth
04:45 PM Bug #3340: Captive Portal deletes concurrent sessions even if noconcurrentlogins is not set
Candidate patch here:
https://github.com/derelict-pf/pfsense/commit/ae6c69833f34d8f14b1c6a9508126905328340bc
Chris Linstruth
04:42 PM Bug #3124: portal_reply_page called twice in specific circumstance
Candidate patch here:
https://github.com/derelict-pf/pfsense/commit/4fd56afe541a0a350dfe52b20521a551edd9f276
Chris Linstruth
04:11 PM Revision 81f19476: Add an option to force a gateway to be down, it fixes #2847
Renato Botelho
03:02 PM Revision de3987e5: Update reserved_keywords checks to match firewall_aliases_edit
firewall_aliases_import should have the same checks for reserved names as firewall_aliases_edit
This code should real...
Phil Davis
02:35 PM Revision 30e2adbc: Merge pull request #871 from phildd/master
Dynamic DNS: List GWGs in Interface to send update from Ermal Luçi
11:35 AM Feature #3387 (New): process_alias_urltable Frequency
Currently the urltable design only allows for updates on a daily interval and is processed via crontab every 12 hours... Shawn Bruce
10:10 AM Feature #2847 (Feedback): Add a checkbox to flag a gateway as "down"
Applied in changeset commit:81f1947666ebbe19f1f6579a1e5293c42c6d1c04. Renato Botelho
09:13 AM Bug #3386 (Closed): apinger not picking up 2nd OpenVPN tunnel
Ermal Luçi
07:31 AM Revision 7ad4b9b7: Merge pull request #878 from phil-davis/master
Bulk Import: fix copy-paste var name error Ermal Luçi
02:43 AM Revision 3b4e6952: Bulk Import: fix copy-paste var name error
Phil Davis

01/05/2014

11:18 AM Revision b760fd31: Merge pull request #877 from phil-davis/master
Allow individual line descriptions on alias bulk import Ermal Luçi
09:35 AM Revision 8c470066: Allow individual line descriptions on alias bulk import
This enhancement allows the user to make a text file of IP addresses, IP subnets and/or IP ranges, like they have alw... Phil Davis
08:54 AM Bug #3386: apinger not picking up 2nd OpenVPN tunnel
I did another reboot and now it worked. You can close this issue (did not find button to close it myself). Schlomo Schapiro
08:48 AM Bug #3386 (Closed): apinger not picking up 2nd OpenVPN tunnel
When adding a 2nd OpenVPN tunnel (client side, shared key static setup) and the corresponding Interface and Gateway i... Schlomo Schapiro

01/04/2014

10:32 PM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
After I posted the above, I have a new idea.
I just copied the Root CA certificate to the Intermediate CA's certif...
Tim Lau
10:18 PM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
I am hit with the same bug.
Also, if you set the Peer Certificate Authority to the Root CA, 2 things happen:
1....
Tim Lau
02:49 PM Feature #3385: Accommodate static routes for PPTP connections
correction :
When the VPN reconnects, the static route is not reinstated and must be re-instated to bring the rou...
James Mills
02:47 PM Feature #3385 (Closed): Accommodate static routes for PPTP connections
Creating a static route on the pfSense box allows routing from the 10.20.2.0 network back across the (pptp) vpn to th... James Mills
07:00 AM Bug #3384 (Resolved): NTPd should deny service if the packet spacing violates the lower limits specified in the discard command (CVE-2013-5211)
ntp.conf(5):
limited
Deny service if the packet spacing violates the lower limits specified
in ...
Jeroen Roovers
04:29 AM Bug #3383 (Resolved): Web GUI becomes slow or unusable if the LDAP server used for GUI auth is unreachable
Hy,
This one have been difficult to find.
I set up a ldap server in user manager through the web gui. Everything ...
Florent THOMAS

01/03/2014

10:00 PM Revision f05bf59b: Merge pull request #875 from dotike/spellcheck
minor spelling correction for pfSense master branch Ermal Luçi
09:41 PM Revision 41681aa6: minor spelling correction for pfSense master branch
Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> Isaac (.ike) Levy
03:56 PM Revision 4e6405b9: Oops correct php syntax
Ermal LUÇI
03:38 PM Bug #2650: FTP helper breaks TCP sequence numbers on 2nd WAN
I've also run into this problem. I didn't want it to get so buried in the pile that it never got looked at again. Rene Churchill
03:05 PM Revision 21f82ab6: Do not allocate the same pipe to everyone rather give each person its own!
Ermal LUÇI
03:05 PM Revision 762b34c4: Do not allocate the same pipe to everyone rather give each person its own!
Ermal LUÇI
02:53 PM Revision f38b383b: Use empty here for testing even if the setting is unset
Ermal LUÇI
02:52 PM Revision c8d611ed: Use empty here for testing even if the setting is unset
Ermal LUÇI
01:24 PM Revision a3a1b24e: Move to zerocopy_enbale for bpf to optimize bpf logging which uses bpf interface. This should increase the general performance since pflog is always enabled.
Ermal LUÇI
11:21 AM Bug #3382 (New): IGMPPROXY fails with more than 32 interfaces
Hi,
I have a problem with the igmpproxy:
I am using pfSense in an enviroment of round about 120 users, and every ...
Thomas Levi
08:33 AM Revision 723f0ac9: Merge pull request #873 from tuyan/patch/copyright_years
Update product_copyright_years end to be calculated on the fly. Chris Buechler

01/02/2014

09:54 PM Bug #3381: LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues
Further to this, the " Borrow from other queues when available" doesn't work when you go 1 level deeper than the root... Ignat Esso
08:25 PM Bug #3381: LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues
FYI - The WAN interface seems to be 100% correct all the time. Ignat Esso
08:25 PM Bug #3381 (Resolved): LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues
LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues. This looks to b... Ignat Esso
03:57 PM Revision 2bb93345: Update copyright_years to be calculated on the fly.
Tuyan Ozipek
03:25 PM pfSense Packages Bug #3380 (Not a Bug): FreeRadius-User-Option "Expiration Date" kills the FreeRadius-Server
Hi,
after adding an User-Expiration-Option to an user of FreeRadius Service, radius tries to restart but breaks:
...
Thomas Levi
11:58 AM Revision 8f56dd27: DyndDNS edit: unset vars when no longer used
phildd
11:13 AM Revision 0350084d: fix syntax
Renato Botelho
10:41 AM Revision 2a45e05f: Fix filter regex
Renato Botelho
09:20 AM Revision 52311f0c: Merge pull request #870 from blagynchy/patch-1
Happy New Year 2014! Renato Botelho

01/01/2014

11:54 PM Revision 9dc3f2bb: Happy New Year 2014!
Optimal: Just updating the copyright years;
I wish to all of you all of health, happiness and good luck of earth to ...
Valentin Georgiev

12/31/2013

12:28 PM Revision 31dce430: Upgrade all firewall rules to include a tracker field. Add a tracker field even for nat for later usage while here.
Ermal LUÇI
12:23 PM Revision 2006d7a4: Generate a tracker id for the filter rules for now. Maybe for nat rules as well?
Ermal LUÇI
09:52 AM Feature #3377: OAuth2 authentication in captive portal
Sure go ahead. Ermal Luçi
04:56 AM Feature #3377 (New): OAuth2 authentication in captive portal
In Captive Portal we have native, ldap and radius authentication. Today, a lot of authentication systems provide OAut... Thomas NOEL

12/30/2013

04:14 PM Revision ba1c86d9: Remove scrub as well
Ermal LUÇI
03:45 PM Revision 31300a95: List GWGs in Interface to send update from
phildd
03:27 PM Revision 32fd1703: Remove even negating nat rules
Ermal LUÇI
02:47 PM Revision a03dfc60: Correct matching for single rule. Somehow the egrep did not work there!
Ermal LUÇI
02:34 PM Revision b80e29e4: Speed up a bit rule number identification by avoiding going into kernel but using the rules parsing of pf which gives the same effect.
Ermal LUÇI
11:56 AM Revision 239024ee: Merge pull request #866 from andrespetralli/master
Enabling advanced RFC 2136 configuration for DHCPd service Renato Botelho
09:23 AM Revision 44b72c67: Fix display of CIDR/Update Freq in Alias Edit
Fixes #3376. I have no idea what the "^" characters were meant to do, but removing them makes the CIDR/Update Freq va... Phil Davis
09:23 AM Revision d564ed24: Validate IP address ranges correctly on Alias Bulk Import
The code was there to attempt to validate and implement IP address range lines in Alias Bulk Import e.g.
10.20.0.0-10...
phildd
08:07 AM Revision 737f26e9: Merge pull request #868 from phildd/master
Validate IP address ranges correctly on Alias Bulk Import Ermal Luçi
08:06 AM Revision ef1c9f09: Merge pull request #867 from phil-davis/master
Fix display of CIDR/Update Freq in Alias Edit Ermal Luçi
03:30 AM Bug #3376: Alias Edit does not display correctly
Applied in changeset commit:44b72c67ec3331ecd3a6430697ad47dbeac7c450. Phillip Davis
02:10 AM Bug #3376 (Feedback): Alias Edit does not display correctly
Applied in changeset commit:1b9ab14ad23e1f66a11801fbe7a24423ab8529a0. Phillip Davis

12/29/2013

04:05 PM Revision 54e81df0: Validate IP address ranges correctly on Alias Bulk Import
The code was there to attempt to validate and implement IP address range lines in Alias Bulk Import e.g.
10.20.0.0-10...
phildd
02:12 PM Revision 1b9ab14a: Fix display of CIDR/Update Freq in Alias Edit
Fixes #3376. I have no idea what the "^" characters were meant to do, but removing them makes the CIDR/Update Freq va... Phil Davis
08:13 AM Bug #3376: Alias Edit does not display correctly
I have no idea what I am doing with the jQuery stuff, but I pulled out some "^" marks in pull request https://github.... Phillip Davis
07:54 AM Bug #3376 (Resolved): Alias Edit does not display correctly
I had a 2.1-RELEASE system and GitSync'd to the 2.1 release branch. I was using Alias Bulk Import, but then also real... Phillip Davis

12/27/2013

09:51 PM Revision 5a890490: Modernize a bit the sshd sart file
Ermal LUÇI
09:38 PM Revision 9be0ec8a: Use the check properly!
Ermal LUÇI
09:35 PM Revision 635c00d3: Correct the check to what was intended
Ermal LUÇI
09:34 PM Revision d68494e6: Correct the check to what was intended
Ermal LUÇI
08:50 PM Revision 57b02731: Remove not needed code
Ermal LUÇI
08:49 PM Revision f6d89471: Make sense of interface mtu handling code. No need to do unneeded operations. This fixes slow boot times and proper handling of mtu for vlans though some work or better model is needed for other interface types. Manual merge of 53555bf2f796cd53cf649410fe1827a9a45fc4a7
Ermal LUÇI
08:37 PM Revision 53555bf2: Make sense of interface mtu handling code. No need to do unneeded operations. This fixes slow boot times and proper handling of mtu for vlans though some work or better model is needed for other interface types.
Ermal LUÇI
06:10 PM Revision aaa78416: Add sshd service to list (if enabled)
Jim Pingle
02:58 PM Revision 1a4ef44e: Delete static route when monitor IP is removed, also save monitor IP even when it's disabled
Renato Botelho
02:58 PM Revision 14be28af: No reason to set the same value to ipprotocol
Renato Botelho
02:12 PM Revision fcd01c8a: Delete static route when monitor IP is removed, also save monitor IP even when it's disabled
Renato Botelho
02:02 PM Revision ee574a9e: Fix a bug introduced in commit 06b8d43c that breaks return_gateways_array() called with $disabled == false
Renato Botelho
01:55 PM Revision 63fee576: No reason to set the same value to ipprotocol
Renato Botelho
09:11 AM Bug #2514: static routes for monitor IPs should be removed
There was an attempt to remove it in the past but seems it had side-effects (see ticket #3179 and commit:32a9eb1873).... Renato Botelho
05:05 AM pfSense Packages Bug #3375 (Closed): BIND, ACLs: Incorrect code is being generated for empty range ACL.
BIND 9.9.4 pkg v 0.3.2;
Steps to reproduce:
1. Create an ACL "Test";
2. Follow the advise and leave "Enter IP .....
Dmitriy K
04:58 AM Bug #3374: Firewall logs shows incorrect rules
I see. Pretty understandable reason.
Basically speaking, if my pfsense box will go berserk with "reload fw filter"...
Dmitriy K
03:22 AM Revision ffe6f371: fix typo
Chris Buechler
02:06 AM Bug #3353: Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
This is probably related to an issue fixed in head of pf and probably the MFC is missed.
Not related to the previous...
Ermal Luçi

12/26/2013

09:52 PM Revision 2aff8089: Fix wording/spacing
Jim Pingle
09:41 PM Revision 5c427ce7: Add support for local (push route) and remote (iroute) network definitions in an OpenVPN client-specific override entry.
Jim Pingle
09:11 PM Revision 9bc68540: Make this box a little narrow so it doesn't force the descriptions to wrap.
Jim Pingle
08:54 PM Revision 141254eb: Use empty even here
Ermal LUÇI
08:47 PM Revision 7cbfc265: Add a "status" subcommand to the svc php shell script.
Jim Pingle
08:28 PM Revision fed1b372: Check if there is a value before trying to do any operation
Ermal LUÇI
08:27 PM Revision c7a3356e: Add a setting to allow the user to specify the clog file size so more (or less) entries may be kept in the raw logs. Retain previous default size values if the user has not specified a preferred size. Files can only be resized when initialized, so provide a "Reset All Logs" button as well to force clear all logs and set them up at the new size.
Jim Pingle
07:27 PM Revision 7b03748b: Correct the php-fpm configuration generation
Ermal LUÇI
06:10 PM Revision 3f248cb6: Fix #3354, savecore -C only expects dumpdev
Renato Botelho
05:53 PM Revision e1ebe9e2: Add an option for users to be able to adjust how many configuration revisions are kept in the local backup cache.
Jim Pingle
04:07 PM Revision bfe615ee: Show backup file size in config history.
Jim Pingle
03:51 PM Revision 57671f81: Fix syntax, unbreak dashboard
Jim Pingle
03:45 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
Same problem here with pfsense 2.1 and cisco router with IOS 12.4(15)T15 as remote endpoint.
IPSEC tunnel doesn't co...
Francesco Lotti
12:11 PM Bug #3353 (New): Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
This still happens on a current build. Jim Pingle
12:10 PM Bug #3354 (Feedback): Savecore error during bootup
Applied in changeset commit:3f248cb65a25189f7cff8f6ad4321998caaab073. Renato Botelho

12/24/2013

05:27 PM Revision fd34b8b5: Fix syntax
Renato Botelho
04:28 PM Revision 9e63dca9: Use intval even here
Ermal LUÇI
04:25 PM Revision b0ae5213: Use intval here to not trust php and also use empty which gives more protections
Ermal LUÇI
03:51 PM Revision 59257969: Sprinkle some more unsets
Ermal LUÇI
03:06 PM Revision e6756251: Remove /var/run/booting early to be consistent with $g['booting']
Renato Botelho
03:04 PM Revision f9dfaeae: Revert "Make sure functions called by rc.start_packages can see $g['booting'] when we are booting"
This reverts commit 5eb99ec9fae6b6ff077559b3feab8565701f2635. Renato Botelho
03:04 PM Revision 0450ae55: Revert "Only unset $g['booting'] when it was set here"
This reverts commit 73abb573feae03b164d3ed4284db4ed4ff26a256. Renato Botelho
03:04 PM Revision 5551d818: Remove /var/run/booting early to be consistent with $g['booting']
Renato Botelho
03:01 PM Revision 677a6426: Revert "Make sure functions called by rc.start_packages can see $g['booting'] when we are booting"
This reverts commit 8a461f41db7907b310171b6e0fb901b2f5e7e2fe. Renato Botelho
03:01 PM Revision afd33d68: Revert "Only unset $g['booting'] when it was set here"
This reverts commit 47493bd326cd7141df7df708b69e10479ed800af. Renato Botelho
02:43 PM Revision 73abb573: Only unset $g['booting'] when it was set here
Renato Botelho
02:42 PM Revision 47493bd3: Only unset $g['booting'] when it was set here
Renato Botelho
02:17 PM Revision 5eb99ec9: Make sure functions called by rc.start_packages can see $g['booting'] when we are booting
Renato Botelho
02:16 PM Revision e2edc30d: When WANTIME is empty, there is nothing to do here
Renato Botelho
02:16 PM Revision 811ecea4: test only does integer comparison, use bc to compare float
Renato Botelho
02:16 PM Revision 8f105c8a: Save status even if no script is executed
Renato Botelho
02:16 PM Revision 98864780: On first run REVIOUSSTATUS doesn't exist, so it cannot be UP or DOWN, invert the logic to fix this. While I'm here, check if file exists before cat it
Renato Botelho
02:15 PM Revision 8a461f41: Make sure functions called by rc.start_packages can see $g['booting'] when we are booting
Renato Botelho
02:09 PM Revision 72a95734: When WANTIME is empty, there is nothing to do here
Renato Botelho
02:08 PM Revision 67e86129: test only does integer comparison, use bc to compare float
Renato Botelho
02:07 PM Revision 128cc1f4: Save status even if no script is executed
Renato Botelho
02:06 PM Revision cd14bb19: On first run REVIOUSSTATUS doesn't exist, so it cannot be UP or DOWN, invert the logic to fix this. While I'm here, check if file exists before cat it
Renato Botelho
10:52 AM Revision 15bec718: While here unset some variables even on vouchers side
Ermal LUÇI
10:45 AM Revision 1f965b69: Merge manually 4fd85b115e2550969ddeadd43a2bc6dafff21779 3f2ae9d58f5ea3d9de175e8daa9c8902b3f23440 and e049c5e74f009430e22e446f149a552d00846d7a
Ermal LUÇI
10:34 AM Revision a2a42c72: Remove not relevant comment now. Also make the operation clear to avoid priority issues.
Ermal LUÇI
10:28 AM Revision e049c5e7: unset these values to not confuse php
Ermal LUÇI
10:23 AM Revision 3f2ae9d5: Properly initialize this
Ermal LUÇI
10:22 AM Revision 4fd85b11: Switch to a while loop to make things clear and readble. Also properly set zone dedicated rules in the rules/pipes DBs to properly release when a zone is deactivated
Ermal LUÇI
10:00 AM Revision 27cea9a3: Remove not relevant comment now. Also make the operation clear to avoid priority issues.
Ermal LUÇI
09:30 AM Bug #3374 (Rejected): Firewall logs shows incorrect rules
It isn't random, it's just using what it knew at the time.
The rules are matched using what is recorded in the act...
Jim Pingle
04:59 AM Bug #3374 (Rejected): Firewall logs shows incorrect rules
Over time, Firewall log is going crazy and picking random rule to show.
Reason to this bug is unknown to me.
Dmitriy K
06:59 AM Revision 9172982d: Merge pull request #863 from dhiltonp/master
/usr/local/www/system.php: strip excess whitespace from ntp field Chris Buechler
04:20 AM Revision 87019fc4: Enabling advanced RFC 2136 configuration for DHCPd service
This change adds the ability to configure RFC 2136 domain name updates
using a hmac-md5 keyname/key.
Andres Petralli

12/23/2013

07:28 PM Revision 56301bed: Fix DHCP lease time display, strftime already convert it to local timezone, so we no need to calc offset
Renato Botelho
07:27 PM Revision d8b37f91: Fix DHCP lease time display, strftime already convert it to local timezone, so we no need to calc offset
Renato Botelho
05:44 PM Feature #972: Allow adding gateways outside of interface subnet
What would be the "correct" way to make this survive reboots, please? Dan F
06:34 AM Feature #972: Allow adding gateways outside of interface subnet
because accommodating 1 in 100,000 scenarios isn't a priority, especially when there is an easy manual work around. P... Chris Buechler
04:40 PM Revision f2aa8287: Remove 'deny unknown clients' option from DHCPv6 since it's not supported, it fixes #3364
Renato Botelho
04:40 PM Revision 079c2927: Remove 'deny unknown clients' option from DHCPv6 since it's not supported, it fixes #3364
Renato Botelho
04:16 PM Revision 26b6e758: Make sure to give the zone a name during the upgrade, or else it comes through with a blank/null name.
Jim Pingle
04:15 PM Revision db817c93: Make sure to give the zone a name during the upgrade, or else it comes through with a blank/null name.
Jim Pingle
02:57 PM Revision 66cc4d43: Correct displaying states status and avoid divison by zero due to wrong data collected
Ermal LUÇI
10:40 AM Bug #3364: DHCPv6 "Deny unknown clients" does not work
Applied in changeset commit:f2aa8287545d45ed22c44b5e2c102fb7a22658b0. Renato Botelho
10:40 AM Bug #3364 (Feedback): DHCPv6 "Deny unknown clients" does not work
Applied in changeset commit:079c2927622510cf34b3ccc225b9193143534c76. Renato Botelho

12/22/2013

02:39 PM Feature #972: Allow adding gateways outside of interface subnet
Three years and counting... How is this still not implemented / patched?
Oliver K.
01:37 PM Revision e20a0af7: Avoid dashboard divide by zero errors
phildd
01:35 PM Revision 0b5d55b7: Merge pull request #865 from phildd/master
Avoid dashboard divide by zero errors Chris Buechler
12:20 PM Feature #3199: Option to accumulate or not IP addresses in Alias table of FQDNs
Normally this will be fixed when filterdns supports reloading with TTL of the DNS record.
This will come soon.
Ermal Luçi
11:49 AM Revision 15183bcb: Avoid dashboard divide by zero errors
phildd
01:28 AM Bug #3373: Sun Quad fast Ethernet ports constantly resetting
I'm guessing it may be fixed already in FreeBSD 10, in which case there isn't anything that needs to be done for 2.2.... Chris Buechler
 

Also available in: Atom